This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9tVi1XoJX9sXZW_XwBYXW2W4t-c.roa File: 9tVi1XoJX9sXZW_XwBYXW2W4t-c.roa (raw, json) Hash identifier: y24xFcZ6zExq48r6jCrTPagWH0ZkrTucDzbO1eLDLgQ= Subject key identifier: F6:D5:62:D5:7A:09:5F:DB:17:65:6F:D7:C0:16:17:5B:65:B8:B7:E7 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFEE4AE08F0E221816372939B40FE2108 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9tVi1XoJX9sXZW_XwBYXW2W4t-c.roa Signing time: Mon 08 Dec 2025 16:56:30 +0000 ROA not before: Mon 08 Dec 2025 16:56:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 266539 IP address blocks: 217.60.12.0/24 maxlen: 24 217.60.14.0/24 maxlen: 24 217.60.184.0/23 maxlen: 24 217.60.193.0/24 maxlen: 24 217.60.198.0/24 maxlen: 24 217.60.242.0/24 maxlen: 24 217.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:e4:ae:08:f0:e2:21:81:63:72:93:9b:40:fe:21:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 16:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f6d562d57a095fdb17656fd7c016175b65b8b7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:24:d3:a1:4d:d3:28:2f:28:1e:57:b2:b1: 62:83:c5:7f:98:c4:7c:4d:af:32:44:fb:87:c7:78: b6:c4:0f:89:65:90:bd:7e:f2:56:ad:33:32:81:e4: b5:4b:2d:d5:8c:7f:97:5c:e2:60:bd:e5:4b:39:a4: 51:b0:bf:c0:19:7b:c0:01:9f:95:51:e5:a4:5a:5e: 0c:50:4d:51:51:49:15:1a:f8:26:57:34:a1:78:1f: 57:46:b7:43:42:34:67:45:91:0c:cf:6d:4b:5f:3e: eb:94:2d:28:fe:48:5a:92:81:10:20:d2:c5:9f:2c: c2:4c:25:8d:7f:72:db:ea:d4:9e:90:c9:92:da:53: 0a:75:53:0d:78:52:14:e9:d7:0d:0e:91:3b:db:1d: 4e:6b:2e:aa:68:65:6c:f5:8e:b3:fd:e8:af:5d:1f: 38:c2:fa:50:bb:09:d1:92:1e:a0:71:19:6c:a7:5e: e2:a6:1c:43:5c:98:4c:e3:95:6a:11:d5:e5:04:8a: c5:01:ed:25:10:a8:26:1f:81:e3:f2:44:e7:96:9c: e0:d5:16:0b:e0:91:fd:b2:96:5b:63:66:a9:ac:b5: 04:c1:1a:ff:a4:19:10:c6:a5:32:1d:5b:f2:05:ae: fe:81:5a:3f:c9:8a:20:a1:d2:21:aa:d3:4a:e2:76: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:62:D5:7A:09:5F:DB:17:65:6F:D7:C0:16:17:5B:65:B8:B7:E7 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9tVi1XoJX9sXZW_XwBYXW2W4t-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.12.0/24 217.60.14.0/24 217.60.184.0/23 217.60.193.0/24 217.60.198.0/24 217.60.242.0/24 217.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption 26:fe:f2:24:52:b6:d6:bc:03:e9:bd:9e:03:0e:5c:7f:b2:c8: 3b:69:5e:ad:ab:f7:b7:12:19:a7:32:a7:e1:ab:9f:4f:de:86: 32:cb:92:b0:ef:85:d5:a7:41:cf:37:04:37:46:5c:33:79:41: 69:6d:8f:92:ef:80:ff:3d:f2:0d:42:28:cf:68:d6:32:c7:16: 1e:f7:66:3f:6d:35:2d:40:03:c8:91:34:0f:64:91:6b:62:c8: c3:cd:09:5f:b9:c8:e7:3c:05:72:aa:b4:c3:0f:36:26:b6:20: 04:7b:b6:08:99:79:7e:29:99:b2:1a:b2:e1:0e:24:61:29:c0: ba:10:fe:30:0b:28:b3:1f:e3:dc:f2:46:88:53:4e:63:9a:31: 5f:96:af:82:e1:3a:25:6e:f1:3e:76:fc:fe:60:b3:80:b0:5b: 52:80:6c:5d:fb:7d:69:08:b2:ef:c1:87:f2:dd:6d:26:df:d1: 6f:27:5a:a2:c8:50:18:2c:4f:d2:38:86:93:99:15:63:d3:7a: fc:2b:b8:7f:fc:f7:d9:7b:b4:c7:b8:64:91:e0:5c:6d:72:aa: d4:9d:8d:9f:0b:15:ff:4f:16:8b:7a:17:df:c7:17:4e:d7:c1: 1f:d6:8e:07:0c:35:2a:b8:cf:56:aa:0c:35:24:f6:95:f2:f9: 72:d4:b6:0e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZr+5K4I8OIhgWNyk5tA/iEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTY1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ1NjJkNTdhMDk1ZmRiMTc2NTZmZDdjMDE2MTc1YjY1YjhiN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt8k06FN0ygvKB5XsrFig8V/mMR8 Ta8yRPuHx3i2xA+JZZC9fvJWrTMygeS1Sy3VjH+XXOJgveVLOaRRsL/AGXvAAZ+V UeWkWl4MUE1RUUkVGvgmVzSheB9XRrdDQjRnRZEMz21LXz7rlC0o/khakoEQINLF nyzCTCWNf3Lb6tSekMmS2lMKdVMNeFIU6dcNDpE72x1Oay6qaGVs9Y6z/eivXR84 wvpQuwnRkh6gcRlsp17iphxDXJhM45VqEdXlBIrFAe0lEKgmH4Hj8kTnlpzg1RYL 4JH9spZbY2aprLUEwRr/pBkQxqUyHVvyBa7+gVo/yYogodIhqtNK4nYlbwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPbVYtV6CV/bF2Vv18AWF1tluLfnMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOXRWaTFYb0pYOXNYWldfWHdCWVhXMlc0dC1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQA2TwMAwQA 2TwOAwQB2Ty4AwQA2TzBAwQA2TzGAwQA2TzyAwQA2Tz6MA0GCSqGSIb3DQEBCwUA A4IBAQAm/vIkUrbWvAPpvZ4DDlx/ssg7aV6tq/e3EhmnMqfhq59P3oYyy5Kw74XV p0HPNwQ3RlwzeUFpbY+S74D/PfINQijPaNYyxxYe92Y/bTUtQAPIkTQPZJFrYsjD zQlfucjnPAVyqrTDDzYmtiAEe7YImXl+KZmyGrLhDiRhKcC6EP4wCyizH+Pc8kaI U05jmjFflq+C4TolbvE+dvz+YLOAsFtSgGxd+31pCLLvwYfy3W0m39FvJ1qiyFAY LE/SOIaTmRVj03r8K7h//PfZe7THuGSR4FxtcqrUnY2fCxX/TxaLehffxxdO18Ef 1o4HDDUquM9Wqgw1JPaV8vly1LYO -----END CERTIFICATE-----Generated at Wed Dec 10 08:59:59 2025 by rpki-client